Security audit
Security checks for vulnerabilities and agentic risk
This is a local sales-coaching helper that appears coherent and does not show hidden access, persistence, network use, or destructive behavior.
Install this if you want a local Chinese-first sales objection coaching tool. Review the generated claims before using them with customers, since the templates include specific performance, certification, and SLA statements that may need verification for your actual product.
The trigger list includes broad phrases such as '销售教练', '客户异议', and '应对策略', which are common in ordinary business conversations and can cause the skill to activate unintentionally. Over-broad invocation expands the skill’s reach beyond explicit user intent, increasing the chance of inappropriate context capture, confusing responses, or unrequested behavioral steering in unrelated chats.
Suspicious Unicode normalization or mixed-script content
The class initializes with lang="zh", making Chinese the default output language. Although a --lang option exists, the default behavior still imposes a specific locale without user opt-in, which matches the policy concern for forced language defaults.
The --lang argument offers both zh and en, but sets default="zh", so users receive Chinese output unless they explicitly override it. This is a natural-language locale policy issue because the tool enforces a specific language by default rather than offering an opt-in choice.
No suspicious patterns detected.
